Amendments to the Claims 



Kindly amend claims 1, 8, 9, 10, 12 & 20, and cancel claims 6 & 7 (without prejudice), as 
set forth below. All pending claims are reproduced below, with changes in the amended claims 
shown by underline (for added matter) and strikethrough/double brackets (for deleted matter). 

1. (Currently Amended) A computer-implemented method comprising: 

securely managing an arbitrary number of data files in non- volatile storage 
in order to restore data after abortion of a write operation, the data being stored in 
a record oriented data structure with each of the records containing, in addition to 
data contents, a first reference indicating the current data-containing record of a 
previous file, and a second reference indicating the current data-containing record 
of a subsequent file, the securely managing comprising: 

performing a write operation comprising an update stage and an 
atomic write stage, the performing comprising: 

performing multiple update operations for a plurality of 
records employing the second references of the plurality of 
records, wherein each file affected by the write operation 
comprises a plurality of records, and for each record thereof 
affected by the write operation, one of said records in each file 
contains existing data prior to said multiple update operations and 
another of said records contains corresponding data as modified 
according to said multiple update operations, each of said records 
also comprising a record- status data element indicative of the 
status of the data contained therein; [[and]] 
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accepting the multiple updates to the plurality of records in 
one atomic write stage after completion of the multiple update 
operations, the one atomic write stage employing the first 
references and the record-status data elements of the plurality of 
records, and wherein at all times during the write operation, for 
each record of a file affected by the write operation, the file 
contains existing data stored prior to the write operation in one 
record, and corresponding data as modified by the write operation 
in another recor d; and 

wherein the first reference of each record comprises a first 
pointer (TTR 1) indicating the current data-containing record of a 
previous file., the second reference of each record comprises a 
further pointer ("PTR 3) indicating the current data-containing 
record of a subsequent file, and a third reference of each record 
comprises a second pointer fPTR 2) indicating the current data- 
containing record of that file . 



2. 



(Previously Canceled). 



3. (Previously Presented) The computer-implemented method as claimed in claim 1 , 
wherein said data prior to the write operation, in each file, is retained as the active data in the 
case of a power failure, until all files have been successfully updated according to said write 
operation. 



4. 



(Previously Presented) The computer-implemented method as claimed in claim 1, 
record contains a synchronization byte, indicating a relationship with records of 



wherein each 



other files. 



5. 



(Previously Presented) The computer-implemented method as claimed in claim 3, 
record contains a synchronization byte, indicating a relationship with records of 



wherein each 



other files. 



6. 



(Currently Canceled). 
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7. (Currently Canceled). 



8. (Previously Presented) A computer-implemented method comprising: 

securely managing EEPROM electrically erasable programmable read 
only memory (EEPROM) data files in order to restore data after abortion of a 
write operation, the data being stored in the files in a record-oriented data 
structure, such that the data in all files affected by the write operation is consistent 
with respect to completion of the write operation, and wherein information 
concerning the status and location of the consistent data is stored in the record 
oriented data structure together with the data, wherein each record of the record 
oriented data structure of the files comprises, in addition to data contents, a first 
reference indicating the current data-containing record of a previous file, and a 
second reference indicating the current data-containing record of a subsequent 
file, the securely managing comprising: 

performing a write operation comprising an update stage and an 
atomic write stage, the performing comprising: 

performing multiple update operations for a plurality of 
records employing the second references of the plurality of 
records, wherein each file affected by the write operation 
comprises a plurality of records, and for each record thereof 
affected by the write operation, one of said records of the file 
contains existing data prior to said multiple update operations and 
another of said records contains corresponding data as modified 
according to said multiple update operations, each of said records 
also comprising a record-status data element indicative of the 
status of the data contained therein; [[and]] 

accepting the multiple updates to the plurality of records 
and wherein the atomic write stage is performed upon completion 
of the multiple update operations and employs the first references 
and the record-status data elements of the plurality of records ; and 
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wherein the first reference of each record comprises a first 
pointer (PTR I) indicating the current data-containing record of a 
previous file, the second reference of each record comprises a 
further pointer (PTR 3) indicating the current data-containing 
record of a subsequent file, and a third reference of each record 
comprises a second pointer (PTR 2) indicating the current data- 
containing record of that file . 

9. (Currently Amended) The computer-implemented method according to claim 8, 
wherein two or more data files are affected by said write operation, and wherein new or modified 
data is written into said files in a cyclic manner, wherein each file comprises an indication of the 
number of records contained in said file and a plurality of records, and wherein each record 
further comprises a synchronisation number synchronising with records of other files. 

1 0. (Currently Amended) The computer-implemented method according to claim 9, 
further comprising determining a current active record of a first of said files, and a working 
record of said first file; setting the synchronization number of the working record of said file to 
the synchronization number of the current active record; copying the data stored in said current 
active record into said working record and adding to or modifying said data according to said 
write operation, in said working record; changing the status of said working record of said file to 
'active'; repeating said steps for each further file; and changing the record status of said original 
current active record of said first file to 'inactive' as an indication that said write operation is 
complete. 

1 1 . (Previously Presented) The computer-implemented method as claimed in claim 
10, wherein said step of determining the current active record and the working record of said 
files comprises searching for the first record in said file whose status byte indicates 'active' status 
and setting this record as said current active record, and setting the subsequent record as said 
working record. 
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1 2. (Currently Amended) The computer-implemented method as claimed in claim 1 1 , 
comprising: 

adding to or modifying the data of a record in the first file by: 

identifying the current active record of said file and a working record and 
copying the data to be added to or modified from the current active record to the 
working record; 

modifying the data in said working record in accordance with the write 
operation; wherein the status byte of said current active record indicates that that 
record is 'fully active' and the status of said working record indicates that that 
record is 'inactive'; 

setting synchronization indicator pointers to indicate that said file is said 
first file and to indicate that no further files have been modified; 

identifying a current active record and a working record of a second file 
and copying the data from the current active record to the working record; 
modifying the data in the working record according to said write operation, 
wherein the status byte of said active current record indicates that the data in this 
record is "fully activ e " 'fully active' and the status byte of the working record 
indicates that this record is 'inactive'; 

setting synchronization indicator pointers to. indicate the link between this 
file and said first file, and changing said synchronization indicator pointer of said 
first file to indicate its link with said second file; and 

repeating these steps for said second file for any subsequent files, wherein 

for the last file affected by said write operation, after setting said 
synchronization indicator pointers, determining that this is the last file, setting an 
indication pointer to indicate that no subsequent files are affected by said writing 
operation; and 

setting the status byte of each of said working records of said affected files 
to a 'fully active' state, whereupon the write operation is complete and the 
modified data is the active data in all files. 
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13. (Previously Presented) The computer-implemented method as claimed in claim 

12, wherein, upon interruption of said write operation at any stage, either all current active 
records of all files affected by said operation are set as 'fully active' records, and the data 
contained in said files prior to the start of said write operation is the current active data, or all 
working records of all files are set to a 'fully active' status, in which case all files contain the 
modified data due to said write operation as said active data. 

14. (Previously Presented) The computer-implemented method as claimed in claim 

13, wherein interruption of said write operation during or immediately after the step of 
modifying the data in the working record of said first file results in the current active record of 
said first file remaining as the 'fully active' data record, at which time no further files have been 
modified and all of the 'active' datable files correspond to the data prior to the write operation. 

15. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write operation during or subsequent to the setting of the 
synchronization indicator pointers in said first file results in the current active record of said first 
file remaining as the 'fully active' data record, at which time no further files have been modified 
and all of the 'active' datable files correspond to the data prior to the write operation. 

16. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write operation during or immediately after the step of 
modifying the data in the second or subsequent files results in the current active record of said 
second or subsequent file remaining set as said 'fully active' record, and, since said 
synchronization indicator pointer of said first file still indicates that said current active record is 
still said 'fully active' record of said first file, the currently active data of both or all of said files 
remains as that prior to the start of the write operation. 

17. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption to said write process during or immediately after modifying the data 
in the working record of the last file affected by said write operation, results in all of the current 
active records of all of said files being retained as said fully active records, wherein the currently 
active data corresponds to the data prior to the write operation. 
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1 8. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write process during or immediately after modification of the 
data in the working record of the last file affected by said write operation, causes all working 
records of all of said files to become set to 'fully active' records, such that all files contain data 
modified as a result of said write operation as the currently active data. 

1 9. (Previously Presented) The computer-implemented method as claimed in claim 
12, wherein, when all of said write steps have been successfully completed, without an 
interruption, said synchronization indicator pointers are used to indicate the links between the 
modified records of the files affected, and all working records are set to status 'fully active' and 
said current active records are set to status 'inactive'. 

20. (Currently Amended) A system for securely managing EEPROM electrically 
erasable programmable read only memory (EEPROM) data files so that the data can be restored 
after abortion of the write operation to said data files, the system comprising: 

an EEPROM, and means for writing data to said EEPROM, said 
EEPROM comprising a number of data files, each data file comprising a plurality 
of records in a record oriented data structure, wherein each record of the record 
oriented data structure of the data files comprises, in addition to data content, a 
first reference indicating the current data-containing record of a previous file, and 
a second reference indicating the current data-containing record of a subsequent 
file, the means for writing, which comprises an update stage and an atomic write 
stage, comprising: 

means for performing multiple update operations for a plurality of 
records employing the second references of the plurality of records, 
wherein each file affected by the write operation comprises a plurality of 
records, and for each record thereof affected by the write operation, one of 
said records in each file contains existing data prior to said multiple update 
operations and another of said records contains corresponding data as 
modified according to said multiple update operations, each of said 
records also comprising a record-status data element indicative of the 
status of the data contained therein; [[and]] 
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means for accepting the multiple updates to the plurality of records 
and wherein the atomic write stage is performed upon completion of the 
multiple update operations and employs the first references and the record- 
status data elements of the plurality of records ; and 

wherein the first reference of each record comprises a first pointer 
(PTR 1) indicating the current data-containing record of a previous file, 
the second reference of each record comprises a further pointer (PTR 3) 
indicating the current data-containing record of a subsequent file, and a 
third reference of each record comprises a second pointer (PTR 2) 
indicating the current data-containing record of that file . 

21-25. (Previously Canceled). 

26. (Withdrawn) A computer-implemented method for ensuring the consistency of 
data stored in records in different files, the records being changed by a transaction, each change 
to a record of a file leading to the generation of new records in the files affected by the 
transaction, the method comprising: 

a) designating one of the files affected by the transaction as a primary 
file, only the primary file having a status concerning the successful execution of 
the transaction, the status assuming the value "current" or "not current"; 

b) setting the status to "current" in each newly generated primary 
record in the primary file; 

c) testing whether the primary file contains multiple primary records 
having the "current" status; 

d) resetting the status of the primary record of the primary file 
preceding the newly generated primary record to "not current", and retaining the 
"current" status of the newly generated primary record, if the write operation for a 
record of the files affected by the transaction is determined not to have terminated 
prematurely and resetting the status of the newly generated primary record to "not 
current", and retaining the "current" status of the preceding primary record of the 
primary file, if the write operation for a record of the files affected by the 
transaction is determined to have terminated prematurely. 

DE9 19990076 -9- 



27. (Withdrawn) The computer-implemented method of claim 26, wherein each 
primary record of the primary file contains data for identifying records in files affected by the 
transaction. 

28. (Withdrawn) The computer-implemented method of claim 27, wherein the 
records of the primary file and the records of the files affected by the transaction are linked by a 
pointer. 
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